CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- openclawOpenClaw 2026.1.29 < 2026.2.1 - Authorization Bypass in Twitch Plugin allowFrom Access Control6.3 Medium
- ibm financial transaction manager for ach services and check services for multi-platformIBM Financial Transaction Manager for ACH Services and Check Services is impacted by multiple vulnerabilities6.1 Medium
- openclawOpenClaw < 2026.2.1 - Inbound Allowlist Policy Bypass in voice-call Extension via Empty Caller ID and Suffix Matching9.2 Critical
- openclaw, openclaw nextcloud-talk +1 moreOpenClaw Nextcloud Talk < 2026.2.6 - Allowlist Bypass via actor.name Display Name Spoofing9.3 Critical
- ibm concertMultiple Vulnerabilities in IBM Concert Software.7.4 High
- openclawOpenClaw < 2026.2.2 - Authorization Bypass via Unauthenticated Telegram Webhook8.2 High
- openclawOpenClaw 2026.1.14-1 < 2026.2.2 - Allowlist Bypass via displayName and Cross-Homeserver localpart Matching in Matrix Plugin6.3 Medium
- openclaw, openclaw @openclaw/bluebubbles +1 moreOpenClaw has BlueBubbles webhook auth bypass via loopback proxy trust7.5 High
- ibm watsonx.dataPrivileged User File Upload Vulnerability Leading to Limited Server-Side Execution affects watsonx.data3.8 Low
- softland fbackupSoftland FBackup Backup/Restore HID.dll link following8.5 High
- openclaw, openclaw voice-call +1 moreOpenClaw voice-call < 2026.2.3 - Webhook Verification Bypass via Forwarded Headers8.2 High
openclawnpmOpenClaw log poisoning (indirect prompt injection) via WebSocket headers3.1 Low- ibm sterling b2b integrator, sterling file gateway +1 moreThe Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure4.9 Medium
- openclawOpenClaw < 2026.2.12 - Unauthenticated Profile Tampering via Nostr Plugin HTTP Endpoints8.3 High
- openclawOpenClaw < 2026.2.2 - SSRF via Attachment Media URL Hydration6.3 Medium
- naturalintelligence fast-xml-parser, red hat migration toolkit for applications 8, advanced cluster security 4.8 +11 more +13 morefast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)7.5 High
- junkurihara httpsig-hyper, httpsig-rs +1 morehttpsig-hyper has Improper Digest Verification that May Allow Message Integrity Bypass7.5 High
- stellar rs-soroban-sdkrs-soroban-sdk #[contractimpl] macro calls inherent function instead of trait function when names collide7.5 High
- jm33-m0 emp3r0remp3r0r Affected by Concurrent Map Access DoS (panic/crash)7.0 High
- wangyunf blossomBlossom File Upload BLOSManager.java put path traversal5.3 Medium
- hewlett packard enterprise (hpe) hpe aruba networking private 5g core, hpe aruba networking private 5g core +1 moreUnauthenticated Information Disclosure in application API allows sensitive system information exposure6.5 Medium
- hewlett packard enterprise (hpe) hpe aruba networking private 5g core, hpe aruba networking private 5g core +1 moreUnauthenticated Information Disclosure in application API allows sensitive system information exposure6.5 Medium
- hewlett packard enterprise (hpe) hpe aruba networking private 5g core, hpe aruba networking private 5g core +1 moreUnauthenticated Improper Access Control in management API allows unauthorized service disruption6.5 Medium
- hewlett packard enterprise (hpe) hpe aruba networking private 5g core, hpe aruba networking private 5g core +1 moreUnauthenticated Authentication Bypass in application API allows unauthorized administrative account creation8.8 High
- ibm security qradar edrIBM Security QRadar EDR Software has multiple vulnerabilities6.3 Medium
- wangyunf blossomBlossom Article Title ArticleController.java content cross site scripting5.1 Medium
- ibm qradar edr, security qradar edr +1 moreIBM Security QRadar EDR Software has multiple vulnerabilities6.3 Medium
- ibm qradar edr, security qradar edr +1 moreIBM Security QRadar EDR Software has multiple vulnerabilities5.9 Medium
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data is vulnerable to sensitive information leaks due to HTTP processing8.1 High
- ibm webmethods integration serverIBM webMethods Integration Server is vulnerable to HTML injection5.4 Medium
- sciyon koyuan thermoelectricity heat network management systemSciyon Koyuan Thermoelectricity Heat Network Management System AsyncTreeProxy.aspx sql injection6.9 Medium
- dell avamar server, avamar virtual edition, powerprotect dp series appliance (idpa) +2 moreDell Avamar Server and Avamar Virtual Edition, versions prior to 19.10 SP1 with CHF338912,...6.5 Medium
- ibm db2 recovery expert for luw, db2 recovery expert +1 moreMultiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows6.3 Medium
- ibm db2 recovery expert for luw, db2 recovery expert +1 moreMultiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows5.3 Medium
- ibm db2 recovery expert for luw, db2 recovery expert +1 moreMultiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows6.8 Medium
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, versions prior to 10.5.6.12, contains an Improper Neutralization...6.6 Medium
- dell unisphere for powermax 9.2.4.18, unisphere for powermax virtual appliance 9.2.4.17 +1 moreDell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Input...5.4 Medium
- ibm db2 recovery expert for luw, db2 recovery expert +1 moreMultiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows6.5 Medium
- ibm db2 recovery expert for luw, db2 recovery expert +1 moreMultiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows5.9 Medium
- ibm db2 recovery expert for luw, db2 recovery expert +1 moreMultiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows6.5 Medium
- dell avamar virtual edition, powerprotect dp series appliance (idpa) +1 moreDell Avamar, versions prior to 19.12 with patch 338905, contains an Improper Limitation of a...6.5 Medium
- dell recoverpoint for virtual machines, recoverpoint for virtual machines (rp4vms) +1 moreDell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded...10.0 Critical
- ibm db2 merge backup for linux, unix and windows, db2 merge backup +1 moreFixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows6.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Defense in Depth Vulnerability3.1 Low
- ibm db2 merge backup for linux, unix and windows, db2 merge backup +1 moreFixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows6.5 Medium
- ibm db2 merge backup for linux, unix and windows, db2 merge backup +1 moreFixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows5.5 Medium
- ibm cloud pak systemImproper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ]5.3 Medium
- dell avamar server, avamar virtual edition, powerprotect dp series appliance (idpa) +2 moreDell Avamar, versions prior to 19.12 with patch 338905, contains an Improper Limitation of a...4.7 Medium
- ibm concertMultiple Vulnerabilities in IBM Concert Software.5.9 Medium
- huace monitoring and early warning systemHuace Monitoring and Early Warning System ProjectRole.aspx sql injection6.9 Medium
- Show moreLoading…